What’s Vulnerable › Products

Spomky-Labs Webauthn Framwork vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Spomky-Labs Webauthn Framwork version is affected

Latest Spomky-Labs Webauthn Framwork vulnerabilities

• CVE-2026-30964 — Webauthn Framework: allowed_origins collapses URL-like origins to host-only values, bypassing exact origin validation (CVSS 5.4)
• CVE-2024-39912 — Enumeration of valid usernames in web-auth/webauthn-lib (CVSS 5.3)
• CVE-2021-38299 — (CVSS 9.8)